Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: xRsEBiPZw3MrcBOioYQzyf39C8kkfk7Z0JcgYhPrbLY=
Subject key identifier: E7:22:E2:DB:6B:6D:A8:BE:0E:E7:66:0A:0F:09:22:B4:E8:40:10:BB
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019910BDFFFCC226497D5E47A2E4DF67D00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0E1F
Signing time: Wed 03 Sep 2025 18:01:51 +0000
Manifest this update: Wed 03 Sep 2025 18:01:51 +0000
Manifest next update: Thu 04 Sep 2025 18:01:51 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: M2uC7zVVLf7TfrwWsCXXQzZaccQGuF4i/h95wBa/wp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:bd:ff:fc:c2:26:49:7d:5e:47:a2:e4:df:67:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Sep 3 18:01:51 2025 GMT
Not After : Sep 4 18:01:51 2025 GMT
Subject: CN=e722e2db6b6da8be0ee7660a0f0922b4e84010bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:d2:08:84:55:5f:11:b2:ee:a1:0d:ac:e3:
e6:a3:a5:6a:c9:09:bb:ad:15:74:85:c0:54:ee:ef:
9e:84:93:8d:ca:12:6b:ad:12:d1:3f:17:c9:f7:2a:
e8:a9:92:6f:1e:71:bd:9d:72:63:0a:4b:b4:13:70:
53:d6:75:c0:a9:d9:85:2e:56:dd:c9:71:39:e6:4f:
f5:dc:08:44:7c:8a:d3:b6:69:61:0c:8d:a4:49:9a:
bd:a1:9e:3a:54:88:47:d9:79:22:54:b9:f2:2a:a3:
1e:d2:70:75:46:3f:9e:ba:48:d1:b0:ce:89:5f:b4:
c6:57:95:9d:f8:63:e9:86:9a:01:8a:64:4d:29:92:
13:0c:e3:79:d2:24:b3:cc:da:9d:24:3c:a3:1d:65:
38:1c:c9:30:e4:55:ec:26:21:4a:43:3a:75:b0:e7:
ca:7a:3d:1b:6e:73:98:98:ca:58:11:43:cd:41:26:
a9:40:c3:ae:6d:76:81:a6:d1:f8:8f:a7:bc:6a:8a:
a3:c0:04:65:2c:50:03:05:bd:63:3e:d8:12:91:0b:
1f:28:5f:d4:14:68:d9:5b:97:91:bf:48:95:c0:a5:
11:cb:76:27:d4:42:be:0a:db:71:d0:56:66:e2:45:
7d:8c:fa:be:c3:0f:ca:64:95:0e:7a:5d:89:c0:9f:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:E2:DB:6B:6D:A8:BE:0E:E7:66:0A:0F:09:22:B4:E8:40:10:BB
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d6:d1:c0:e8:33:1f:ae:58:3e:cb:db:c3:79:d7:ee:00:49:
18:dc:b7:23:72:3f:0a:50:91:55:43:ed:d2:66:c3:3b:bc:5b:
ba:b0:c1:65:0a:86:9e:e3:1c:c0:0b:c5:b9:aa:52:d2:ac:d2:
02:60:81:ca:e5:e4:65:02:35:6a:fa:67:94:ff:77:7f:7a:98:
9b:6c:bf:30:4b:5a:ad:aa:06:b9:47:67:30:f3:d0:b5:39:ef:
87:43:f0:56:3a:7d:ef:9a:9d:6f:ab:d5:5a:6c:9b:e9:f7:04:
50:03:0c:64:82:42:a7:ed:d2:95:45:0c:50:a6:7d:cb:21:70:
84:48:7e:64:df:0c:ab:60:07:b1:03:11:07:c8:e2:5f:4f:fb:
6b:ba:ca:62:cc:30:77:98:79:66:b9:7c:98:76:db:3d:5b:4c:
cf:63:f8:8a:c9:37:fd:e9:05:7f:fb:01:e9:8b:70:63:ab:6d:
3b:f5:9d:b3:81:47:1a:80:a8:97:d8:b4:91:43:89:fe:a7:48:
fe:e7:67:9e:aa:18:a6:ea:eb:9d:c3:a1:aa:1a:e3:9d:78:d2:
76:25:a0:e0:37:6e:75:35:77:e3:2f:99:cc:19:8c:00:fb:d2:
a4:67:f4:bd:5f:19:cf:1d:29:42:8c:b2:50:f9:c1:51:1d:e5:
75:62:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 01:49:52 2025 by rpki-client